Deploying IT Infrastructure Solutions 2013

From ICO wiki
Revision as of 11:01, 4 January 2013 by Irokk (talk | contribs) (Created page with 'Category: Õppetöö right|text-top <br style="clear: both" /> [[Image:I_want_you.jpg|thumb|200px|right|http://commons.wi…')
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Jump to navigationJump to search
The printable version is no longer supported and may have rendering errors. Please update your browser bookmarks and please use the default browser print function instead.


http://commons.wikimedia.org/wiki/file:i_want_you.jpg



Short Introduction

Assignements

Security testing of web application.

Description

Learn about the security of web applications. Find vulnerabilities from known vulnerable web applications. Find not known vulnerabilities of development version of web application Study Information Portal (Used by eleven universities of applied science in Estonia) File report that describes methods, tests and findings.

Expected outcome

Description of testing methods and findings (all vulnerabilities that students found in development environment) as testing report.

Expectations from students

Understanding web applications (What is difference of GET and POST, how sessions work, what is header etc) Understanding web programming at least one language (php, java, ruby, C#, python is preferred)

Lectures support

Several security related topics will covered during lectures and practical classes before starting actual testing. Lecture covers several attack types and vulnerabilities like SQL injection, cmd injection, XSS, CSRF etc. Practical classes based on DVWA (Damn Vulnerable Web Application) After lectures and practical classes students will get access to web application development environment for practical work.

Lecturer: Margus Ernits (Estonian IT College)


Important Dates

Arriaval

Teams